Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.mft
File: j5-COvmTs5lcnl_0wii9-ZRR-4o.mft (raw, json)
Hash identifier: OCEcRx1J2+ACFYT7aUBjm15/nJ6ZaWurkWmXxMOOKW8=
Subject key identifier: 42:BC:56:21:F6:12:AA:42:11:9B:6A:A5:06:89:E1:50:7A:49:D1:E4
Authority key identifier: 8F:9F:82:3A:F9:93:B3:99:5C:9E:5F:F4:C2:28:BD:F9:94:51:FB:8A
Certificate issuer: /CN=8f9f823af993b3995c9e5ff4c228bdf99451fb8a
Certificate serial: 0198D6989F987FF449640C5CE6905EB8E59E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5-COvmTs5lcnl_0wii9-ZRR-4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.mft
Manifest number: 03FA
Signing time: Sat 23 Aug 2025 11:03:03 +0000
Manifest this update: Sat 23 Aug 2025 11:03:03 +0000
Manifest next update: Sun 24 Aug 2025 11:03:03 +0000
Files and hashes: 1: 8KsjpNRaIZUXOi8DwLVHVI28dt8.roa (hash: SXYejuZAdmSHLj52AFM2feQKm4GSepnKMI2O57vhHV0=)
2: j5-COvmTs5lcnl_0wii9-ZRR-4o.crl (hash: U58YmqwB1vpWyv+yg/GG5FvYR6sbDfmXb5AZ20Llyjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5-COvmTs5lcnl_0wii9-ZRR-4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:9f:98:7f:f4:49:64:0c:5c:e6:90:5e:b8:e5:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9f823af993b3995c9e5ff4c228bdf99451fb8a
Validity
Not Before: Aug 23 11:03:03 2025 GMT
Not After : Aug 24 11:03:03 2025 GMT
Subject: CN=42bc5621f612aa42119b6aa50689e1507a49d1e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c4:cf:95:f1:c7:e4:45:96:27:08:65:cf:31:
16:20:9f:8f:5e:55:2f:d3:70:ba:62:79:a8:29:ec:
7b:11:95:43:74:cd:1b:f0:da:d0:ea:70:8c:3e:c5:
29:bc:cc:da:f1:b0:03:e7:61:61:e1:f8:28:11:32:
2e:35:77:72:44:e5:dc:45:6e:b1:f5:69:81:62:91:
41:09:ad:af:6d:a4:9b:4f:7e:26:e8:2c:8f:26:e7:
ae:6c:1f:c6:c5:80:60:c6:71:d8:06:74:66:0b:fb:
ce:12:37:76:38:a1:33:26:5b:eb:f4:21:e0:0e:1c:
6e:0e:df:2d:fb:90:8a:96:99:cd:5c:f4:3b:fc:38:
5e:5c:31:dc:8e:40:cf:c8:a9:0d:4a:9d:76:0e:61:
25:06:f4:19:a1:5c:c0:ee:35:2b:5a:f0:16:80:7e:
cc:a9:a4:81:97:93:02:8e:fc:77:8e:9e:4e:a5:5c:
c5:e9:75:b2:07:79:a9:89:75:fe:4f:ad:91:d4:87:
15:b1:06:71:1e:1e:b0:70:e2:bd:2e:a1:8f:f3:38:
6c:43:73:da:39:69:3a:9e:aa:3e:90:b6:0c:6d:78:
56:4b:fc:17:bb:31:57:be:eb:9c:b0:ef:8e:29:6e:
24:20:bb:92:8d:4b:66:75:d6:75:db:d4:f3:4c:a7:
ba:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:BC:56:21:F6:12:AA:42:11:9B:6A:A5:06:89:E1:50:7A:49:D1:E4
X509v3 Authority Key Identifier:
keyid:8F:9F:82:3A:F9:93:B3:99:5C:9E:5F:F4:C2:28:BD:F9:94:51:FB:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5-COvmTs5lcnl_0wii9-ZRR-4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:82:82:bf:61:50:09:e0:d2:f6:56:45:8b:16:0a:82:c4:e1:
f7:69:cf:ff:b4:c2:cb:e6:1e:8e:25:96:d3:52:ca:34:d0:3c:
bc:5d:5f:8c:1a:c4:d0:ac:fa:7a:16:88:53:f4:19:1e:db:0b:
02:b0:b6:71:5b:9a:10:8e:4a:8e:be:bf:53:3f:b4:88:12:5f:
ef:87:4a:b1:c9:44:e0:0f:4f:38:ee:d1:6c:56:31:fb:15:c6:
6f:04:8c:39:7d:65:ba:ec:a9:53:33:fe:4e:95:da:a0:a6:28:
54:0a:87:1b:6d:6c:6d:c7:d5:43:bd:40:77:46:5e:fa:f7:89:
53:19:4a:1e:75:56:19:4a:39:6e:f1:80:a0:0a:38:a7:51:4e:
d9:4d:ac:56:0a:c2:c7:61:75:87:89:9b:1d:d1:36:93:8e:6f:
4e:ee:fa:8c:9e:1d:c1:c1:4b:e5:74:87:86:63:92:1e:c3:b8:
5e:cf:43:95:95:60:90:11:a6:68:7b:bd:ba:0d:13:b0:8e:c6:
bc:d1:6a:4c:77:be:8f:8a:ef:6f:cb:0b:bd:33:9b:98:da:35:
74:f7:36:8f:4d:07:0d:be:f6:c2:e2:50:c5:64:7c:22:97:aa:
f9:7f:a0:5e:59:89:dd:f3:d6:02:19:03:da:8d:87:ff:6e:48:
e1:d0:5c:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmJ+Yf/RJZAxc5pBeuOWeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmOWY4MjNhZjk5M2IzOTk1YzllNWZmNGMyMjhiZGY5OTQ1
MWZiOGEwHhcNMjUwODIzMTEwMzAzWhcNMjUwODI0MTEwMzAzWjAzMTEwLwYDVQQD
Eyg0MmJjNTYyMWY2MTJhYTQyMTE5YjZhYTUwNjg5ZTE1MDdhNDlkMWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicTPlfHH5EWWJwhlzzEWIJ+PXlUv
03C6YnmoKex7EZVDdM0b8NrQ6nCMPsUpvMza8bAD52Fh4fgoETIuNXdyROXcRW6x
9WmBYpFBCa2vbaSbT34m6CyPJueubB/GxYBgxnHYBnRmC/vOEjd2OKEzJlvr9CHg
DhxuDt8t+5CKlpnNXPQ7/DheXDHcjkDPyKkNSp12DmElBvQZoVzA7jUrWvAWgH7M
qaSBl5MCjvx3jp5OpVzF6XWyB3mpiXX+T62R1IcVsQZxHh6wcOK9LqGP8zhsQ3Pa
OWk6nqo+kLYMbXhWS/wXuzFXvuucsO+OKW4kILuSjUtmddZ129TzTKe6FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEK8ViH2EqpCEZtqpQaJ4VB6SdHkMB8GA1UdIwQY
MBaAFI+fgjr5k7OZXJ5f9MIovfmUUfuKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajUtQ092bVRzNWxjbmxfMHdpaTktWlJSLTRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9jZTRkODEtZWM1NC00OTJlLWE3NTEt
MTUxMTY4OWMzYzhhLzEvajUtQ092bVRzNWxjbmxfMHdpaTktWlJSLTRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9jZTRkODEtZWM1NC00OTJlLWE3NTEtMTUxMTY4OWMzYzhh
LzEvajUtQ092bVRzNWxjbmxfMHdpaTktWlJSLTRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAYKCv2FQ
CeDS9lZFixYKgsTh92nP/7TCy+YejiWW01LKNNA8vF1fjBrE0Kz6ehaIU/QZHtsL
ArC2cVuaEI5Kjr6/Uz+0iBJf74dKsclE4A9POO7RbFYx+xXGbwSMOX1luuypUzP+
TpXaoKYoVAqHG21sbcfVQ71Ad0Ze+veJUxlKHnVWGUo5bvGAoAo4p1FO2U2sVgrC
x2F1h4mbHdE2k45vTu76jJ4dwcFL5XSHhmOSHsO4Xs9DlZVgkBGmaHu9ug0TsI7G
vNFqTHe+j4rvb8sLvTObmNo1dPc2j00HDb72wuJQxWR8Ipeq+X+gXlmJ3fPWAhkD
2o2H/25I4dBcag==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:10:04 2025 by rpki-client